1: 1 (was RE: [ietf-dkim] Re: ISSUE 1525 -- Restriction to posting by firstAuthorbreaks email semantics)

[John L]

>> How does an SSP-like protocol do that?  Assertions like "I am a phish
>> target" don't do it.
>
> Why not?

Because you (the generic you, whoever publishes SSP) aren't credible short 
of some reputation system which would make SSP irrelevant anyway.

It's fine to make statements about your own practices, like "I sign 
everything" or "All of my mail is composed in iambic pentameter" since 
that reflects things you have control over.  Claiming you're a phish 
target is making assertions about the behaviors of zillions of other 
senders who you don't even know.

R's,
John